HA failover when 1 port loses conectivity

[jloehndorf]

Looking for ways to setup a PA5020 pair for HA that takes into account if the link to one interface goes down the system fail over.  I have hear of possibilities of using a "HEARTBEAT" up the link to cause the failover when it fails.

[bat]

jloehndorf

Have you checked Link Monitoring under Device > High Availability it has the condition of "Any" or "All" under link-group as shown below:

The above will cause failover if either ethernet1/3 or ethernet1/4 go down.

Any -> if any of the interfaces go down on active device a failover will occur

All   -> only when all the interfaces go down failover will occur

Thanks

[ssharma]

Hi,

You can configure that with Link monitoring. There is another option as well for path monitoring. If you are looking for option for interface then link monitoring is what you are looking for.

Here in snapshot above, I have asked firewall to monitor both ethernet 11 and 12 and if "Any" of the interface goes down, it will cause a failover. You can also configure "All" , that would mean if both 11 and 12 goes down then only failover will occur. Hope this helps. Thank you.

[jloehndorf]

CSharma,

Thank you for the lead.

[jloehndorf]

SSharma,

Thank you for the comment and direction.

[hshah]

Hi Jloehndorf,

Following document has complete HA configuration with Link monitoring.

How to Configure High Availability on PAN-OS

Regards,

Hardik Shah